[HIGH] Null reset codes were allowed

PKSA-p714-559s-qh89 GHSA-2m5g-8xpw-42vp

Affected version: <=2.1.6

Reported by:
FriendsOfPHP/security-advisories, GitHub